CVE Vulnerability Catalog

An issue has been discovered in GitLab CE/EE affecting all versions from 11.8 to 16.1.5, from 16.2 to 16.2.5, and from 16.3 to 16.3.1. A malicious Maintainer can, under specific circumstances, leak the Sentry token by changing the configured URL in the Sentry error tracking settings page.

An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation, it was possible to create model experiments in public projects.

Senayan Library Management Systems SLIMS 9 Bulian version 9.6.1 is vulnerable to Server Side Request Forgery (SSRF) via admin/modules/bibliography/pop_p2p.php.

An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured.

An issue has been discovered in GitLab EE affecting all versions from 16.1 to 16.1.5, from 16.2 to 16.2.5, and from 16.3 to 16.3.1. An external user with an owner role in a group may escalate their privileges by creating a service account in that group.

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content.

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importing or cloning malicious content.

In the GitHub repository instantsoft/icms2 prior to version 2.16.1-git, there is an external control of system or configuration settings.

Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is installed.

FreeRDP, a free implementation of the RDP protocol, has a vulnerability in the `RleDecompress` function due to an Out-Of-Bounds Read. This issue occurs when the `pbSrcBuffer` variable is processed without checking if it contains sufficient data.

FreeRDP, a free implementation of the RDP protocol, has a vulnerability due to an Out-Of-Bounds Read in the `general_YUV444ToRGB_8u_P3AC4R_BGRX` function. This issue arises from insufficient data for the `pSrc` variable, resulting in crashes.

FreeRDP, a free implementation of the RDP protocol, has a vulnerability due to an Out-Of-Bounds Write in the `writePixelBGRX` function. The issue is caused by incorrect calculations of the `nHeight` and `srcStep` variables and has been fixed in version 3.0.0-beta3.

FreeRDP, a free implementation of the RDP protocol, has a vulnerability due to an Out-Of-Bounds Write in the `progressive_decompress` function. The issue is caused by incorrect calculations of the `nXSrc` and `nYSrc` variables. It has been addressed in versions 2.11.0 and 3.0.0-beta3.

FreeRDP, a free implementation of the Remote Desktop Protocol (RDP), has a vulnerability in the `clear_decompress_bands_data` function that lacks offset validation, leading to an out-of-bounds write. Exploitation of this vulnerability may result in unauthorized writes.

FreeRDP, a free implementation of the RDP protocol, has a vulnerability in the `general_LumaToYUV444` function due to an Out-Of-Bounds Read. This issue arises from processing the `in` variable without checking if it contains sufficient data.

FreeRDP, a free implementation of the RDP protocol, has an Integer Overflow vulnerability in the `gdi_CreateSurface` function, leading to Out-Of-Bound Write. This issue affects FreeRDP based clients only and does not affect FreeRDP proxies.

FreeRDP, a free implementation of the RDP protocol, has a vulnerability due to Integer-Underflow leading to Out-Of-Bound Read in the `zgfx_decompress_segment` function. This issue may cause application crashes.

There is a sensitive information leak through log files in Acronis Agent products (Linux, macOS, Windows) before build 35433.

CVE-2023-41751 involves sensitive information disclosure due to improper token expiration validation. The affected product is Acronis Agent (Windows) before build 32047.

CVE-2023-41750 concerns sensitive information disclosure due to missing authorization. The affected products are Acronis Agent (Linux, macOS, Windows) before build 32047.